CVE-2025-27906
IBM Content Navigator information disclosure
- State
- Published
- Severity
- 5.3 Medium
- Published
- Oct 14, 2025
- Updated
- Oct 14, 2025
- Reserved
- Mar 10, 2025
Description
IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the files cannot be read obtained or modified.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | ibm |
Weaknesses
- CWE-548 Exposure of Information Through Directory Listing
Affected Products
| Product | Versions |
|---|---|
Content NavigatorIBM |
|
References
- https://www.ibm.com/support/pages/node/7247854vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.